Recherche « Mediatek mt8678 firmware »
18 CVE
-
CVE-2026-20589 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6768 firmware · Mediatek mt6769 firmware
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
-
CVE-2026-20588 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6768 firmware · Mediatek mt6769 firmware
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.
-
CVE-2026-20587 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6768 firmware · Mediatek mt6769 firmware
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.
-
CVE-2026-20586 8.8 Élevée
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt2718 firmware · Mediatek mt6768 firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
-
CVE-2026-20579 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6768 firmware · Mediatek mt6769 firmware
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.
-
CVE-2026-20542 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6878 firmware · Mediatek mt6897 firmware
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143.
-
CVE-2026-20541 5.3 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6985 firmware · Mediatek mt6986 firmware · Mediatek mt6988 firmware
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.
-
CVE-2026-20530 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6991 firmware · Mediatek mt6993 firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.
-
CVE-2026-20525 5.3 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt6835 firmware · Mediatek mt6858 firmware
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.
-
CVE-2026-20500 5.5 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt6835 firmware · Mediatek mt6858 firmware
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.
-
CVE-2026-20496 4.4 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6983 firmware · Mediatek mt8676 firmware · Mediatek mt8678 firmware
In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.
-
CVE-2026-20489 4.4 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.
-
CVE-2026-20488 4.4 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.
-
CVE-2026-20486 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt2718 firmware · Mediatek mt6878 firmware
In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.
-
CVE-2026-20477 6.0 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6991 firmware · Mediatek mt6993 firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.
-
CVE-2026-20475 6.0 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6991 firmware · Mediatek mt6993 firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.
-
CVE-2026-20474 6.0 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware
In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.
-
CVE-2026-20473 6.0 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt8910 firmware · Mediatek mt6993 firmware
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.